This is a community for designs specifically crafted to make the experience worse for the user. This can be due to greed, apathy, laziness or just downright scumbaggery.
Typing a password slows you down, so now you'll need to enter a 2fa and a password. Fucking brilliant!
This could have been done by issuing a private key stored locally on device via Bluetooth. 2FA by requiring biometric on opening the app. Bonus points for allowing USB and then use whatever that monstrosity is as fallback.
Then for other sensitive details have whatever account do go through one time proof of ownership flow.
Doing it this way is just lazy.
Person heading towards lonely, empty carpark late at night after work or uni finished.
Notices someone following them.
Increases speed.
So does the person following.
Rushes to their car as the person following them starts running towards them.
Gets in their car and slams the door just as the person reaches the car, furiously smashing at the window to try and get in.
Person begins to start the car and the car responds:
"We have sent a 6-digit code to the following mobile phone number. When you receive it, type the code into your car's keypad to authenticate".
But the car's 'voice' is drowned out by the screams as the window smashes.
My new Ford has a 5g antenna installed. I regret my purchase tbh but I needed a small truck with good MPG and there wasn't anything else I could get.
Your vehicle might be too new for this, but you might be able to disable it by just pulling a fuse.
It probably also has an rf connector that you can disconnect.
I believe there are guides to remove the sim card in the car
A new car in 2026 probably has an eSIM, not a removable one
Fuuuck. Just smash it fr
Wow, look at that whole heap of why modern cars can fuck all the way off.
Also, being able to manipulate the operation of the vehicle remotely or it announcing its own location at all times doesn't exactly scream 'security' (or privacy) to me.
Oh boy are you gonna be disappointed with every vehicle manufactured in the last decade
I am :(
My car is only recent enough to have Bluetooth. I'm really dreading the day I have to get something newer. I love being able to just turn a knob to adjust the temperature or volume
That seems like an idiot took the copy for two competing internal opinions and pasted them without understanding.
Just another reason not to use the app I already don’t use
But think of all the useful data you're missing out on generating. Sure, it's not useful to you, but how is the manufacturer supposed to keep making money after you drive it off the lot? If you're not thinking of the shareholders, you're a selfish person.
Haha, love it
Demanding you to use 2FA? Should be standard in this day and age.
As long as session cookie lasts for, dunno, months. Extended automatically.
Mandating 2FA for every fucking time you use the app, and only using email for 2FA? Special place in Hell. (I'm looking at you McDonald's)
(Could be worse. Could be SMS 2FA.)
I went to a McDonald's for the first time in years recently, and the first thing they ask you now is not some variation of what you'd like to order, but "Did you order on the app?"
Will you be using the McDonald’s app today?
I feel like whoever screenshotted this cropped a following paragraph telling users to use passkeys... That's the only way this would make sense
Ah yes, the third kind of evil.
Passkeys can be kinda nifty. Restrictions on what is accepted as a valid device for passkeys and that sort of issues suck though.
You're ridiculous
Im not convinced. Considering my first examples of seeing passkeys were from Microsoft and Meta trying to force feed them to me just like they do with their AI, I'm in the camp of believing there's a more nefarious purpose behind them until completely proven otherwise. These companies are completely allergic to altruistic motives especially when it's something being pushed this hard.
i barely see the point of passkeys anyways, you can do 90% the same thing with a password manager which 1) keeps your credentials under your own control, and 2) adds another layer of security by encrypting your list of "passkeys" (i.e. very long passwords).
The biggest selling point with passkeys is the mutual authentication. Solving for attacker in the middle phishing is huge.
In exchange for being able to check what the charge is on our car - basically, whether it's time to leave coffee shop - I get one of the most information-stealing, asks too-many-privileges apps on my phone. And it's quite hard to do without it with an electric car. Looking at you, Ford, although I understand all manufacturers do the same.
MFAA and a password in exchange for eg. an OAuth token so that you can manage the devices on your account, and then use your phone's usual security to control access to the app, would be one thing. But this looks more like the security team has made some demands, and the developers have implemented it in the laziest, MVP-compliant, way that they can.
I get one of the most information-stealing, asks too-many-privileges apps on my phone
Ford's app doesn't actually require ANY permissions other than network access to do what you said. It doesn't even require Nearby Devices to lock/unlock the car, nor start climate, set departure times, etc. Their app is actually pretty non-intrusive.
...this is thanks to the fact that the car's onboard modem is so "cloud connected" instead, so it's even more difficult to avoid telemetries! So cool, right?
This is also why I will always make sure I have a physical keyfob if I'm ever driving a Ford somewhere. It has happened way too often that when Google Cloud has problems, Ford's "keyless entry" goes down.
I think it might be a bit overkill to require a login to start your car.
It’s only for remote start, or off you have the highest trim versions, using your phone instead of a key fob. Using the standard key fob requires no logging in. Though I do wish you could choose to require a pin to start the car, that would actually be a nice security feature.
To help speed up your log in experience, you'll now also need to separately log into another app in order to log into this one in addition to the current method.
It's so smooth
“I can see you’re trying to adjust your headrest. I can help you with that. To assist me, please log in to your Ford account with MFA…”